Описание
Weak password requirement vulnerability
in Lamassu Bitcoin ATM Douro machines, in its 7.1 version
, which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:lamassu:douro_firmware:7.1:*:*:*:*:*:*:*
cpe:2.3:h:lamassu:douro:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:lamassu:douro_ii_firmware:7.1:*:*:*:*:*:*:*
cpe:2.3:h:lamassu:douro_ii:-:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.00029
Низкий
5.6 Medium
CVSS3
7.1 High
CVSS3
Дефекты
CWE-521
Связанные уязвимости
CVSS3: 5.6
github
около 2 лет назад
Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack.
EPSS
Процентиль: 8%
0.00029
Низкий
5.6 Medium
CVSS3
7.1 High
CVSS3
Дефекты
CWE-521